openSUSE Security Update : ffmpeg (openSUSE-2017-449)

This update for ffmpeg fixes the following issues : Security issue fixed : - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog : - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb339 4aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...

ffmpeg: Heap-buffer-overflow in av_samples_copy

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6456688074817536 Project: ffmpeg Fuzzer: libFuzzerffmpegAUDIOAVCODECIDAACfuzzer Fuzz target binary: ffmpegAUDIOAVCODECIDAACfuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

OPENSUSE-SU-2017:0958-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog: - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb3394aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...

OPENSUSE-SU-2017:0961-1 Security update for ffmpeg

This update for ffmpeg fixes the following issues: Security issue fixed: - CVE-2016-10190: remote code execution vulnerability 1 - libavformat/http.c boo1022920 Detailed ChangeLog: - 3.1.6: https://github.com/FFmpeg/FFmpeg/blob/e08b1cf2df8cfdb3394aa5ab0320739f8b5a1c4f/Changelog - 3.2.4:...

Remote Code Execution(RCE)

ffmpeg is vulnerable to remote code execution RCE attacks. A heap-based buffer overflow in ffserver.c is caused by the failure to check chunk size mismatches. The resulted buffer overflow can be exploited to launch RCE...

Remote Code Execution (RCE)

ffmpeg is vulnerable to remote code execution RCE attacks. A heap-based buffer overflow in libavformat/rtmppkt.c is caused by the failure to check for RTMP packet size mismatches. The resulted buffer overflow can be exploited by aligning chunks and by using a white-what-where condition to launch...

Remote Code Execution (RCE)

ffmpeg is vulnerable to remote code execution RCE. Wrong usage of strtoll in the httpreadstream function in http.c passes a negative chunksize in chunk encoding. Therefore, it leads to a buffer overflow allocated next to the AVIOContext structure which eventually causes rip control and then code...

ffmpeg: Global-buffer-overflow in ff_h264_filter_mb_fast

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=6515070404132864 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDH264fuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDH264fuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type:...

ffmpeg: Global-buffer-overflow in ff_acelp_interpolatef

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=4791735110598656 Project: ffmpeg Fuzzer: aflffmpegAUDIOAVCODECIDAMRNBfuzzer Fuzz target binary: ffmpegAUDIOAVCODECIDAMRNBfuzzer Job Type: aflasanffmpeg Platform Id: linux Crash Type: Global-buffer-overfl...

FFmpeg 'Libavcodec' Remote Code Execution Vulnerability

FFmpeg is a complete solution for recording, converting and streaming audio and video from the FFmpeg team. A security vulnerability exists in Libavcodec in FFmpeg versions prior to 0.11. A remote attacker can exploit this vulnerability to cause a denial of service memory corruption and applicati...

CVE-2012-5361

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

CVE-2012-5361

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

Code injection

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

CVE-2012-5361

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

DEBIAN-CVE-2012-5361

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

CVE-2012-5361

Libavcodec in FFmpeg before 0.11 allows remote attackers to execute arbitrary code via a crafted WMV file...

CVE-2012-5361

CVE-2012-5361 affects FFmpeg’s Libavcodec prior to 0.11, where parsing WMV content can allow a remote attacker to execute arbitrary code. The vulnerability arises from memory-corruption issues during WMV/ASF/QT parsing in libavcodec, enabling code execution with the attacker’s files served remote...

FFmpeg Heap Overflow vulnerability (CVE-2016-10190)

作者：bird@tsrc 1. 前言 FFmpeg是一个著名的处理音视频的开源项目，使用者众多。2016年末paulcher发现FFmpeg三个堆溢出漏洞分别为CVE-2016-10190、CVE-2016-10191以及CVE-2016-10192。本文详细分析了CVE-2016-10190，是二进制安全入门学习堆溢出一个不错的案例。 调试环境： 1. FFmpeg版本：3.2.1按照https://trac.ffmpeg.org/wiki/CompilationGuide/Ubuntu1编译 2. 操作系统：Ubuntu 16.04 x64 2. 漏洞分析...

chromium-browser: multiple out of bounds writes in chunkdemuxer

An integer overflow in FFmpeg in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed a remote attacker to perform an out of bounds memory write via a crafted video file, related to ChunkDemuxer...

ffmpeg: Crash in ff_emu_edge_vfix10_mmx

Project: https://git.ffmpeg.org/ffmpeg.git Detailed report: https://oss-fuzz.com/testcase?key=5432155620507648 Project: ffmpeg Fuzzer: libFuzzerffmpegVIDEOAVCODECIDVP6Ffuzzer Fuzz target binary: ffmpegVIDEOAVCODECIDVP6Ffuzzer Job Type: libfuzzerasanffmpeg Platform Id: linux Crash Type: UNKNOWN RE...